Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914AF976AB3511EFA9EA05AB762E951A.roa
File: 914AF976AB3511EFA9EA05AB762E951A.roa (raw, json)
Hash identifier: 5WgB9Jg+kFK/fKUrhtdmlwFbd/FxkhbpeCA4R9XRZko=
Subject key identifier: 89:19:0C:ED:2D:AD:07:33:63:C7:47:97:C2:ED:4F:1B:49:E0:EE:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01135A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914AF976AB3511EFA9EA05AB762E951A.roa
Signing time: Mon 25 Nov 2024 14:00:03 +0000
ROA not before: Mon 25 Nov 2024 13:59:59 +0000
ROA not after: Wed 07 Jan 2026 13:59:59 +0000
asID: 139057
IP address blocks: 154.85.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70490 (0x1135a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 25 13:59:59 2024 GMT
Not After : Jan 7 13:59:59 2026 GMT
Subject: CN=674482e3-7ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:a6:29:c0:71:f7:9a:ae:ba:7b:3b:d5:ed:
85:ee:47:b2:d8:03:6d:28:4e:b8:29:61:7b:96:48:
cc:a7:c7:e6:fd:49:f1:e4:58:e2:1f:09:ea:d4:75:
22:e8:40:cc:f0:62:9d:39:5f:0a:e6:52:76:de:d2:
9f:fd:a4:be:97:fd:2b:0a:05:da:bc:5b:74:10:9f:
a0:df:a8:4b:bd:31:98:9b:be:18:5c:b9:28:d3:1c:
6b:ff:4f:c7:28:22:f2:ce:d4:6b:e6:32:f1:56:bb:
94:86:80:ab:87:e4:70:68:44:05:bc:e5:bd:0f:c6:
68:52:30:af:54:7a:ae:3e:1d:18:8e:ab:7e:a2:4d:
a8:8b:5b:95:b7:d0:5a:60:7b:02:3d:8c:80:23:d0:
a6:ee:f7:3e:67:5e:1e:8c:df:8e:11:41:aa:f3:1f:
ad:f5:3b:ba:77:ed:73:f3:47:f4:97:e2:92:b2:9a:
1f:bc:00:61:dd:c0:b2:44:99:8c:a9:ec:a0:06:2a:
41:02:4b:92:e4:95:9f:c1:06:15:5a:ee:e0:06:79:
20:b1:db:be:d3:40:fa:58:6a:71:46:d4:60:30:24:
27:fe:e6:cd:a1:c3:e9:51:97:80:1e:c3:9e:4f:c9:
60:40:c7:84:8c:d7:ab:8a:df:28:13:bd:8e:9c:86:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:19:0C:ED:2D:AD:07:33:63:C7:47:97:C2:ED:4F:1B:49:E0:EE:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914AF976AB3511EFA9EA05AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.76.0/22
Signature Algorithm: sha256WithRSAEncryption
69:77:84:30:02:22:13:33:bb:4b:b4:df:d1:4b:ff:50:11:7f:
e5:60:41:ec:d8:7e:a7:7a:ff:05:c0:83:86:44:eb:cc:c3:9d:
40:ed:25:af:76:63:79:17:77:69:d1:6d:77:f8:89:4a:09:48:
85:c6:57:65:67:f7:66:97:89:07:cc:be:07:35:e9:49:dd:4c:
27:50:dc:49:a2:80:fc:5d:d2:b3:d7:72:bd:1e:14:15:8b:9d:
18:db:48:e7:ba:56:28:b3:c4:d5:45:16:43:ee:dc:82:ec:0b:
81:a4:00:59:be:6b:3f:44:19:32:7f:bf:a6:ed:d0:1f:18:ff:
92:1a:43:77:30:91:e4:4c:a4:f9:a5:e7:55:ed:72:b6:87:c5:
df:4b:09:b1:fd:0d:d2:31:7d:26:0b:71:cf:60:60:ba:b1:a8:
ef:8e:b6:75:28:b7:c6:d6:9f:81:6f:18:61:70:8b:e1:c4:77:
a8:97:f1:d3:45:30:cf:19:30:82:81:88:19:74:9d:37:cf:ad:
82:55:dd:84:75:26:5b:4b:1b:9d:ab:e4:63:b8:b4:13:1a:a5:
04:6e:88:fa:38:38:87:c0:c2:14:e0:87:ee:51:a7:24:a7:30:
e6:9b:b5:1a:3d:af:8d:de:b3:d5:9b:0f:f5:bd:49:84:db:fc:
4d:7c:b0:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARNaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTI1MTM1OTU5WhcNMjYwMTA3MTM1OTU5WjAYMRYw
FAYDVQQDEw02NzQ0ODJlMy03YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7DymKcBx95quuns71e2F7key2ANtKE64KWF7lkjMp8fm/Unx5FjiHwnq
1HUi6EDM8GKdOV8K5lJ23tKf/aS+l/0rCgXavFt0EJ+g36hLvTGYm74YXLko0xxr
/0/HKCLyztRr5jLxVruUhoCrh+RwaEQFvOW9D8ZoUjCvVHquPh0Yjqt+ok2oi1uV
t9BaYHsCPYyAI9Cm7vc+Z14ejN+OEUGq8x+t9Tu6d+1z80f0l+KSspofvABh3cCy
RJmMqeygBipBAkuS5JWfwQYVWu7gBnkgsdu+00D6WGpxRtRgMCQn/ubNocPpUZeA
HsOeT8lgQMeEjNerit8oE72OnIYm6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIkZ
DO0trQczY8dHl8LtTxtJ4O40MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MTRBRjk3NkFCMzUxMUVGQTlFQTA1QUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlVMMA0GCSqGSIb3DQEB
CwUAA4IBAQBpd4QwAiITM7tLtN/RS/9QEX/lYEHs2H6nev8FwIOGROvMw51A7SWv
dmN5F3dp0W13+IlKCUiFxldlZ/dml4kHzL4HNelJ3UwnUNxJooD8XdKz13K9HhQV
i50Y20jnulYos8TVRRZD7tyC7AuBpABZvms/RBkyf7+m7dAfGP+SGkN3MJHkTKT5
pedV7XK2h8XfSwmx/Q3SMX0mC3HPYGC6sajvjrZ1KLfG1p+BbxhhcIvhxHeol/HT
RTDPGTCCgYgZdJ03z62CVd2EdSZbSxudq+RjuLQTGqUEboj6ODiHwMIU4IfuUack
pzDmm7UaPa+N3rPVmw/1vUmE2/xNfLC8
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:52:18 2025 by rpki-client